Terrorist organization from Venezuela targeting ATMs in massive theft operation, FBI warns

ST. LOUIS (KMOV/Gray News) - The FBI is warning of a rise in ATM jackpotting.

Investigators say nearly 1,900 of these cyberattacks have hit ATMs across the U.S. since 2020, with 700 happening last year, totaling $20 million in losses.

According to the FBI, jackpotting happens most often at stand-alone ATMs in rural areas. It says criminals will open the face of the machine, put malware onto the hard drive, then program the ATM to dispense the cash inside.

“What happens is some of the software systems are outdated and that allows malicious actors to open up the box, which gives them physical access to the computer and inject a malicious message into the machine, telling it to put out cash,” Ning Zhang, a cybersecurity professor at Washington University, said.

Investigators say it is often carried out by a sophisticated organized crime ring and that ATMs are targeted because many have outdated software running on older versions of Windows.

The FBI has charged 93 people who the FBI says are part of the Tren de Aragua Foreign Terrorist Organization from Venezuela in a massive wave of ATM jackpotting across the country.

Analysts say banks lose millions of dollars to such crimes, with costs being passed on to consumers through higher insurance and operating costs.

Zhang said the hackers could steal a customer’s bank card information, but they are normally more interested in getting the cash straight from the machine.

Before using an ATM, customers can check for signs of tampering.

Look for signs of a common ATM crime called skimming, when criminals put card skimmers into the card slot or place a new keypad over the ATM keypad. These devices enable them to steal the user’s bank card information.

If the ATM card slot feels wobbly or sticks out more than usual, or the keypad feels spongy or looks misaligned, those are red flags that a skimmer has been placed on it.

Consumers should not insert their bank cards and should report what they see to the bank and law enforcement.

Bank customers can also set up alerts on their accounts so that they will receive text or email notifications when transactions are made.